Loading...
SeniorFull-timeRustAWSGCPAzureTerraformGraphQLCI/CDGitAIAPI
Salary Range
$146,000 - $170,000 /year
About the Role
The GoodLeap security team is responsible for safeguarding the organization’s information assets and is involved in various aspects of the business, from product safety to building security and ensuring privacy. This security engineer role provides an opportunity to shape the security and resilience of GoodLeap systems and services.
Key Responsibilities
- →Design, build, implement, and operate security and fraud monitoring, detection, and response capabilities
- →Lead security and fraud monitoring, detection, and response activities, including investigations and threat hunting
- →Identify potential misuse and abuse cases in enterprise systems and propose solutions to detect these scenarios
- →Support or develop components of the security analytics platform
- →Support embedded (product) security team and general security operations team
Requirements
- ✓Strong communicator with the ability to lead technical architecture discussions
- ✓Expertise in security event management, monitoring, threat hunting, incident response, and playbook creation
- ✓Experience with threat modeling methodologies
- ✓Expertise with EDR solutions/platforms, such as CrowdStrike, S1, Palo Alto Cortex EDR
- ✓Experience with AWS services, including KMS, SST, Container Registry, ELBs, Lambda, API Gateway, CloudTrail, and IAM
- ✓Experience designing, configuring, and implementing security and fraud monitoring for core enterprise systems
- ✓Experience working with AI and ML toolsets
- ✓Strong understanding of identity management and authentication standards
- ✓Practical experience with CI/CD pipelines and DevOps tools
- ✓Proficiency in writing automation scripts in multiple languages and integrating with REST/GraphQL APIs
- ✓Experience overseeing vulnerability and threat management at the platform and application levels
- ✓Familiarity with penetration testing and red team exercises
- ✓Ability to balance a high-level view of security strategy with attention to detail
